4.3

CVE-2014-8150

CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a URL.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version7.0
Haxx ≫ Libcurl Version6.0
Haxx ≫ Libcurl Version6.1
Haxx ≫ Libcurl Version6.1 Updatebeta
Haxx ≫ Libcurl Version6.2
Haxx ≫ Libcurl Version6.3
Haxx ≫ Libcurl Version6.3.1
Haxx ≫ Libcurl Version6.4
Haxx ≫ Libcurl Version6.5
Haxx ≫ Libcurl Version6.5.1
Haxx ≫ Libcurl Version6.5.2
Haxx ≫ Libcurl Version7.1
Haxx ≫ Libcurl Version7.1.1
Haxx ≫ Libcurl Version7.2
Haxx ≫ Libcurl Version7.2.1
Haxx ≫ Libcurl Version7.3
Haxx ≫ Libcurl Version7.4
Haxx ≫ Libcurl Version7.4.1
Haxx ≫ Libcurl Version7.4.2
Haxx ≫ Libcurl Version7.5
Haxx ≫ Libcurl Version7.5.1
Haxx ≫ Libcurl Version7.5.2
Haxx ≫ Libcurl Version7.6
Haxx ≫ Libcurl Version7.6.1
Haxx ≫ Libcurl Version7.7
Haxx ≫ Libcurl Version7.7.1
Haxx ≫ Libcurl Version7.7.2
Haxx ≫ Libcurl Version7.7.3
Haxx ≫ Libcurl Version7.8
Haxx ≫ Libcurl Version7.8.1
Haxx ≫ Libcurl Version7.9
Haxx ≫ Libcurl Version7.9.1
Haxx ≫ Libcurl Version7.9.2
Haxx ≫ Libcurl Version7.9.3
Haxx ≫ Libcurl Version7.9.4
Haxx ≫ Libcurl Version7.9.5
Haxx ≫ Libcurl Version7.9.6
Haxx ≫ Libcurl Version7.9.7
Haxx ≫ Libcurl Version7.9.8
Haxx ≫ Libcurl Version7.10
Haxx ≫ Libcurl Version7.10.1
Haxx ≫ Libcurl Version7.10.2
Haxx ≫ Libcurl Version7.10.3
Haxx ≫ Libcurl Version7.10.4
Haxx ≫ Libcurl Version7.10.5
Haxx ≫ Libcurl Version7.10.6
Haxx ≫ Libcurl Version7.10.7
Haxx ≫ Libcurl Version7.10.8
Haxx ≫ Libcurl Version7.11.0
Haxx ≫ Libcurl Version7.11.1
Haxx ≫ Libcurl Version7.11.2
Haxx ≫ Libcurl Version7.12.0
Haxx ≫ Libcurl Version7.12.1
Haxx ≫ Libcurl Version7.12.2
Haxx ≫ Libcurl Version7.12.3
Haxx ≫ Libcurl Version7.13.0
Haxx ≫ Libcurl Version7.13.1
Haxx ≫ Libcurl Version7.13.2
Haxx ≫ Libcurl Version7.14.0
Haxx ≫ Libcurl Version7.14.1
Haxx ≫ Libcurl Version7.15.0
Haxx ≫ Libcurl Version7.15.1
Haxx ≫ Libcurl Version7.15.2
Haxx ≫ Libcurl Version7.15.3
Haxx ≫ Libcurl Version7.15.4
Haxx ≫ Libcurl Version7.15.5
Haxx ≫ Libcurl Version7.16.0
Haxx ≫ Libcurl Version7.16.1
Haxx ≫ Libcurl Version7.16.2
Haxx ≫ Libcurl Version7.16.3
Haxx ≫ Libcurl Version7.16.4
Haxx ≫ Libcurl Version7.17.0
Haxx ≫ Libcurl Version7.17.1
Haxx ≫ Libcurl Version7.18.0
Haxx ≫ Libcurl Version7.18.1
Haxx ≫ Libcurl Version7.18.2
Haxx ≫ Libcurl Version7.19.0
Haxx ≫ Libcurl Version7.19.1
Haxx ≫ Libcurl Version7.19.2
Haxx ≫ Libcurl Version7.19.3
Haxx ≫ Libcurl Version7.19.4
Haxx ≫ Libcurl Version7.19.5
Haxx ≫ Libcurl Version7.19.6
Haxx ≫ Libcurl Version7.19.7
Haxx ≫ Libcurl Version7.20.0
Haxx ≫ Libcurl Version7.20.1
Haxx ≫ Libcurl Version7.21.0
Haxx ≫ Libcurl Version7.21.1
Haxx ≫ Libcurl Version7.21.2
Haxx ≫ Libcurl Version7.21.3
Haxx ≫ Libcurl Version7.21.4
Haxx ≫ Libcurl Version7.21.5
Haxx ≫ Libcurl Version7.21.6
Haxx ≫ Libcurl Version7.21.7
Haxx ≫ Libcurl Version7.22.0
Haxx ≫ Libcurl Version7.23.0
Haxx ≫ Libcurl Version7.23.1
Haxx ≫ Libcurl Version7.24.0
Haxx ≫ Libcurl Version7.25.0
Haxx ≫ Libcurl Version7.26.0
Haxx ≫ Libcurl Version7.27.0
Haxx ≫ Libcurl Version7.28.0
Haxx ≫ Libcurl Version7.28.1
Haxx ≫ Libcurl Version7.29.0
Haxx ≫ Libcurl Version7.30.0
Haxx ≫ Libcurl Version7.31.0
Haxx ≫ Libcurl Version7.32.0
Haxx ≫ Libcurl Version7.33.0
Haxx ≫ Libcurl Version7.34.0
Haxx ≫ Libcurl Version7.35.0
Haxx ≫ Libcurl Version7.36.0
Haxx ≫ Libcurl Version7.37.0
Haxx ≫ Libcurl Version7.37.1
Haxx ≫ Libcurl Version7.38.0
Haxx ≫ Libcurl Version7.39
Canonical ≫ Ubuntu Linux Version10.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version12.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.81% 0.932
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
https://support.apple.com/kb/HT205031
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10743
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
http://lists.opensuse.org/opensuse-updates/2015-02/msg00040.html
http://rhn.redhat.com/errata/RHSA-2015-1254.html
http://advisories.mageia.org/MGASA-2015-0020.html
http://curl.haxx.se/docs/adv_20150108B.html
Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147856.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147876.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156945.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157188.html
http://secunia.com/advisories/61925
http://secunia.com/advisories/62075
http://secunia.com/advisories/62361
http://www.debian.org/security/2015/dsa-3122
http://www.mandriva.com/security/advisories?name=MDVSA-2015:021
http://www.securityfocus.com/bid/71964
http://www.securitytracker.com/id/1032768
http://www.ubuntu.com/usn/USN-2474-1
https://kc.mcafee.com/corporate/index?page=content&id=SB10131
https://security.gentoo.org/glsa/201701-47